Privacy Policy
MyTulips Wellness Sdn Bhd (Company No. 202401035628), trading as HealthLux Family Wellness Centre ("we", "us"), respects your privacy. This notice explains how we process your personal data as a data controller under Malaysia's Personal Data Protection Act 2010 (PDPA), as amended by the Personal Data Protection (Amendment) Act 2024.
1. Personal data we collect
- Contact and booking details: your name, phone/WhatsApp number, email (if given), the treatment, date, time and number of guests you request, and messages you send us.
- Payment details: when online payment is available, payments are processed by our payment provider. We receive confirmation of payment and limited details (such as amount and reference), not your full card number.
- Health information you choose to tell us: such as pregnancy, injuries, allergies or medical conditions relevant to your treatment. This is sensitive personal data and we process it only with your explicit consent, to keep your treatment safe.
- Website data: basic technical data (such as IP address, browser type and pages visited) collected by our hosting and security provider to keep the website secure and working. This website does not use advertising cookies.
2. Why we use it
- To take, confirm, change and cancel bookings, and to process payments and refunds.
- To provide your treatment safely and suitably.
- To reply to your questions and handle feedback or complaints.
- To send you offers, but only if you agree. You can opt out at any time by telling us.
- To meet legal, tax and accounting obligations, and to protect our rights.
3. Is it compulsory?
Your name and contact number are needed to make a booking. If you do not provide them, we may not be able to confirm your booking. Health information is voluntary, but if you do not tell us about a relevant condition we may not be able to adjust your treatment safely.
4. Who we share it with
We do not sell your personal data. We share it only with service providers who help us run our business (data processors), such as our payment provider, messaging and email providers, and website hosting, and only as needed for those services; and with authorities where required by law. Our processors must keep your data secure as required by the PDPA.
5. Transfers outside Malaysia
Some of our service providers (for example messaging, email or website hosting providers) may store or process data outside Malaysia. When this happens, we take steps permitted under the PDPA to make sure your data receives a comparable level of protection.
6. How long we keep it
We keep booking records for as long as needed for the purposes above and to meet legal and accounting requirements (generally up to 7 years for transaction records), then delete or anonymise them.
7. Security and data breaches
We use reasonable technical and organisational measures to protect your personal data. If a personal data breach occurs, we will notify the Personal Data Protection Commissioner as required by law and, where the breach is likely to cause you significant harm, we will notify you without unnecessary delay.
8. Your rights
- Access and correction: you can ask for a copy of your personal data and ask us to correct it.
- Withdraw consent and limit processing: you can withdraw consent or ask us to limit how we use your data, including stopping marketing messages.
- Data portability: you can ask us to transmit your personal data to another data controller of your choice, where technically feasible and the data format is compatible.
We may charge a fee for access requests as allowed by law, and will respond within the time required by the PDPA.
9. Contact us / Data Protection Officer
For questions, requests or complaints about your personal data, contact our Data Protection Officer:
MyTulips Wellness Sdn Bhd, A-LG-06, Lower Ground Floor, Qliq Damansara Hotel, Empire Damansara, 2, Jalan PJU 8/8A, Damansara Perdana, 47820 Petaling Jaya, Selangor
WhatsApp / Phone: 014-600 2800
Email: to be confirmed
10. Changes
We may update this policy from time to time. The latest version is always on this page.
11. Language
This notice is also available in Bahasa Melayu. If there is any inconsistency, the Bahasa Melayu version prevails.